CVE record · CVE-2025-8452

Unauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., Toshiba Tec, and Konica Minolta, Inc.

CVSS 4.3 MediumEPSS 0.0027 · 19th percentile

Published by the CVE Program (CNA: AHA) at 12 Aug 2025, 15:23 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Brother Industries, Ltd	DCP-L8410CDW	affected ZK and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L8610CDW	affected ZK and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L8690CDW	affected ZK and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L8900CDW	affected ZM and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L9570CDW	affected ZM and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L9577CDW	affected ZM and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L8610CDW(for Japan)	affected ZD and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L9570CDW(for Japan)	affected ZD and earlier semver Other versions: unaffected
Brother Industries, Ltd	HL-L5218DN	affected 1.12(F) and earlier semver Other versions: unaffected
Brother Industries, Ltd	HL-L5228DW	affected 1.12(F) and earlier semver Other versions: unaffected
Brother Industries, Ltd	DCP-L5510DN	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	DCP-L5512DN	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	DCP-L5518DN	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	DCP-L5510DW	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	DCP-L5610DN	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	DCP-L5660DN	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	DCP-L5662DN	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L5710DN	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L5715DN	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L5718DN	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L5710DW	affected 1.12(H) and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L5715DW	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L5717DW	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L5728DW	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L5912DW	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L5915DW	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L6710DW	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L6720DW	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L6810DW	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L6910DN	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L6915DN	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L6915DN CSP	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L6912DW	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L6915DW	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-EX910	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-EX915DW	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L6820DW	affected 1.15(H) and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L9610CDN	affected 1.22(S) and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L9630CDN	affected 1.22(S) and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L9635CDN	affected 1.22(S) and earlier semver Other versions: unaffected

And 373 more products. The full list is on the CVE record.

Identifiers: CVE-2025-8452
CNA: AHA
Weakness (CWE): CWE-538
Tags: Brother Industries, Ltd DCP-L8410CDW
Brother Industries, Ltd MFC-L8610CDW
Brother Industries, Ltd MFC-L8690CDW
Brother Industries, Ltd MFC-L8900CDW
Brother Industries, Ltd MFC-L9570CDW
Brother Industries, Ltd MFC-L9577CDW
Brother Industries, Ltd MFC-L8610CDW(for Japan)
Brother Industries, Ltd MFC-L9570CDW(for Japan)
Information disclosure
Published: 12 Aug 2025
Updated: 8 Oct 2025

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
4.3	Medium	3.1	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	CNA (AHA)

CISA KEV Not listed.
EPSS 0.0027, the 19th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 12 Aug 2025. New records show when each source confirmed them.

Sources

References from the CNA

support.brother.com/g/b/faqend.aspx?c=us&lang=en&prod=group2&faqid=faq00100851_000 vendor-advisory
www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed/ third-party-advisoryrelated
takeonme.org/gcves/GCVE-1337-2025-00000000000000000000000000000000000000000000000001011111011111010111111001000000000000000000000000000000000000000000000000000000001 technical-descriptionthird-party-advisory
www.cve.org/CVERecord?id=CVE-2024-51977 related
help.runzero.com/docs/installing-an-explorer/ exploit

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.